Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HGxRggPpA9L3ux3nBGLhIeLj_Cw.roa
File: HGxRggPpA9L3ux3nBGLhIeLj_Cw.roa (raw, json)
Hash identifier: FWSKU7t75kOf1LDx2rbg1xf9RWBH4pGMzeVstY3f8Ow=
Subject key identifier: 1C:6C:51:82:03:E9:03:D2:F7:BB:1D:E7:04:62:E1:21:E2:E3:FC:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6718C039
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HGxRggPpA9L3ux3nBGLhIeLj_Cw.roa
Signing time: Wed 02 Feb 2022 04:10:45 +0000
ROA not before: Wed 02 Feb 2022 04:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1729675321 (0x6718c039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 04:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c6c518203e903d2f7bb1de70462e121e2e3fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7c:4b:02:a2:84:09:56:a7:af:09:25:0b:1d:
18:89:63:10:a3:98:5a:1a:8d:bd:19:2d:2c:0f:28:
ea:b7:48:ed:09:5c:ab:cd:a9:4e:03:fd:92:d5:8e:
21:1c:4e:36:f0:65:12:50:bf:e7:ad:a6:01:7c:67:
e3:87:c9:da:1d:f6:71:b5:f2:83:47:4d:af:94:c1:
ec:fd:15:d2:3f:1a:94:41:a3:bd:cb:ab:bc:52:f1:
63:60:47:c6:bc:52:a0:d8:72:15:87:8f:9e:cd:a5:
19:f8:ff:10:25:47:20:f9:47:26:fd:d3:b7:69:11:
fc:37:56:a0:b6:d7:91:37:04:7d:f7:e5:a7:fd:cf:
9a:5e:49:62:25:6f:de:82:f1:2e:f9:1d:24:d5:61:
11:ab:d8:09:04:c5:12:f4:f4:6e:2f:3b:92:41:33:
01:02:b5:7c:d9:1f:d0:d4:47:c5:e4:70:d0:df:f0:
83:71:66:b8:d2:8b:92:6d:25:00:9f:c1:96:8e:4b:
fc:7a:ee:2b:88:0b:99:77:18:83:31:e1:a4:f0:16:
3f:f2:93:f0:d9:9b:97:9d:7f:85:d9:86:5d:1c:ba:
79:ea:85:8c:18:a5:c4:48:37:3c:1e:a2:bc:8e:01:
a6:c3:e6:36:68:50:16:60:66:30:ea:a9:4c:8d:ad:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6C:51:82:03:E9:03:D2:F7:BB:1D:E7:04:62:E1:21:E2:E3:FC:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/HGxRggPpA9L3ux3nBGLhIeLj_Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:88:bc:af:bb:80:92:1f:30:67:9d:40:9b:0e:56:9a:bb:fb:
2c:57:a6:e0:a1:de:69:3e:d4:50:70:75:f9:00:36:8d:1c:54:
b5:0f:f2:61:1e:af:d7:f9:46:94:fa:f6:77:81:48:6b:9a:95:
7e:7a:e4:14:a9:31:ea:8c:4a:32:60:e8:55:9d:cc:8f:61:da:
17:17:d1:2b:c1:d2:8e:dd:a0:67:18:89:ef:29:23:3c:28:ab:
98:9a:05:d3:20:08:94:d1:a9:2d:ac:cd:bf:13:04:87:d4:af:
13:58:1e:2b:24:e0:b1:de:fc:86:d6:7e:08:04:25:31:52:f5:
5c:20:7b:a9:8e:eb:79:d4:f7:dc:14:e1:b1:c6:9a:20:98:86:
f7:30:e3:8a:c3:70:8a:f6:cb:3a:d3:00:9e:ac:8d:91:55:cf:
b6:b1:2d:98:51:ff:89:65:8d:cd:0b:74:38:a2:f6:dd:b6:db:
07:6e:a5:47:c8:78:00:d0:fa:73:bb:05:a1:49:59:bd:11:27:
3b:ee:b9:ad:ac:85:3c:c7:ba:3a:c2:d3:99:4c:65:a7:7b:b6:
84:91:98:ea:c8:bd:4a:eb:1c:02:d2:ce:03:1b:e7:c2:df:92:
5b:43:39:2a:24:a0:bb:67:d5:d1:df:c2:bd:f2:7b:0b:64:48:
7c:f6:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:07 2025 by rpki-client